
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json)
Hash identifier: 85Ck/7YApQUrRxZ6np68xZZbnW+yPQGFsV2uiaDGwG4=
Subject key identifier: D0:7F:A5:EA:34:74:8B:96:2A:A0:18:7C:EA:56:2E:53:B6:20:97:19
Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Certificate serial: 2D2C76B7FE8C2743A71F5E406B40A603B95AFF5F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
Manifest number: 92
Signing time: Fri 28 Aug 2026 06:48:02 +0000
Manifest this update: Fri 28 Aug 2026 06:43:02 +0000
Manifest next update: Mon 31 Aug 2026 17:49:02 +0000
Files and hashes: 1: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=)
2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=)
3: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: KFypyVYVb86UXualMSOt+WwnYcsK3Ei5fNiwE8F9NTc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2c:76:b7:fe:8c:27:43:a7:1f:5e:40:6b:40:a6:03:b9:5a:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31
Validity
Not Before: Aug 28 06:43:02 2026 GMT
Not After : Aug 31 17:49:02 2026 GMT
Subject: CN=D07FA5EA34748B962AA0187CEA562E53B6209719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:e0:5a:6d:a3:83:5e:41:a7:66:14:71:d4:
e8:0f:1b:88:3e:55:c7:f6:0f:e0:9f:bb:0a:8e:23:
ef:42:c3:20:87:78:5a:cb:ce:d6:c3:e9:5f:8c:1b:
11:50:44:11:c8:80:cc:b0:7b:77:0c:a9:04:a5:4f:
e0:04:5d:96:04:10:af:27:8b:d4:29:8a:76:b9:b1:
8a:29:39:34:fe:73:5d:81:f2:ee:f1:70:94:75:4c:
9c:ec:20:96:dc:04:df:57:19:08:55:ee:57:60:dc:
2f:05:5e:3c:c8:43:b5:d0:12:ad:1a:f5:93:c5:a4:
e5:5b:b3:bb:be:42:fe:be:9d:b4:99:00:08:b8:5f:
dd:87:17:b5:01:3a:b6:87:8d:2d:91:4f:d3:cf:a5:
73:00:ac:3e:49:dd:23:35:eb:a0:21:15:b1:7b:71:
3e:6e:73:92:6d:ce:7d:3d:f6:a2:58:e9:7f:3b:29:
fd:74:cb:29:1b:aa:90:5f:ac:d3:f5:02:62:65:0e:
0d:46:f6:d9:34:45:f1:3b:6a:b3:6c:de:1a:bc:ce:
cb:1f:20:25:98:3f:e9:e1:fb:5c:48:9f:e5:ff:5e:
bc:0d:94:f0:22:bb:65:fc:c8:c7:89:16:67:58:2e:
95:4d:34:c6:92:a7:83:29:54:df:6f:b6:fd:aa:a1:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:A5:EA:34:74:8B:96:2A:A0:18:7C:EA:56:2E:53:B6:20:97:19
X509v3 Authority Key Identifier:
keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:30:58:4b:b8:d7:c7:b4:a8:fb:02:a5:d6:a0:34:73:58:d0:
02:c5:89:1a:38:85:b9:6e:ba:c3:76:23:45:02:d2:98:df:77:
fc:2f:68:01:3f:44:eb:33:02:ec:c3:ae:f0:f1:6c:2f:2e:5d:
4e:2c:5d:51:44:8b:15:bd:d6:04:22:f1:89:e3:a2:28:af:08:
d9:43:b2:bb:88:e6:2e:b2:c9:6e:e1:1a:49:4a:79:5d:57:66:
50:5f:88:49:2d:6f:25:71:12:73:d1:a1:09:0c:51:ca:83:88:
db:39:80:23:35:4a:a8:1a:c6:88:0d:72:25:e3:88:ad:0f:2d:
03:00:38:60:80:e9:4f:96:9e:1a:ea:a2:68:ae:8c:56:f1:c9:
20:52:43:31:7c:92:20:e4:ee:34:bf:ab:7c:d0:83:f8:19:8e:
c0:ea:35:01:74:4c:4b:75:77:ec:23:95:e4:11:c7:93:7e:b7:
cb:48:78:06:a1:ca:6b:aa:c2:99:18:16:a2:15:25:21:6a:90:
50:28:20:6c:de:84:a4:bd:26:92:f3:cf:aa:d9:3a:5e:2e:01:
7c:58:b8:17:dd:49:af:cc:c4:10:0a:31:74:72:3a:57:9e:91:
4f:11:2d:25:66:f0:45:11:d1:08:2d:fa:4f:57:70:ae:31:3c:
bd:4e:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:55:00 2026 by rpki-client